Hackers can use 9 of the most popular AI tools to assemble botnets

6 hours ago

Prompt injection is the top AI security threat because LLMs cannot distinguish between legitimate and malicious instructions.
Current guardrails only mitigate damage without solving the root cause of separating trusted from untrusted sources.
Push-based attacks target individuals (e.g., via email) and are limited in scale, while pull-based attacks (e.g., from websites) have also been limited in scale.
HalluSquatting is a new pull-based attack that exploits LLM hallucinations to target AI coding assistants and agents, enabling large-scale exploits like botnet assembly and DDoS attacks.
The attack works by predicting hallucinated resource identifiers, registering them with malicious code, and infecting devices indiscriminately, affecting tools such as Cursor, GitHub Copilot, and others.

Hasty Briefsbeta